Proto-Agent
中文 Download free
FeaturesDownloadPricingEnterpriseDocsBlog
Privacy

Privacy Policy

Last updated 2026-10-23

⚠️ Draft — This is a launch draft pending review by qualified legal counsel; for global distribution the English version governs.

This Privacy Policy explains how the Proto-Agent software (the “Software”) and this website handle data. The core principle is one sentence: local-first — your data stays on your own machine by default.

1. Scope and Roles

  • This website and download site: we are the data controller for the limited data described in Section 5.
  • The Proto-Agent instance you deploy yourself: you are the data controller. Conversations, attachments, agent assets and configuration in that instance are stored on your machine. We cannot access or read them, and we do not process them.

2. Local Data

The Software stores agents, sessions, attachments and model connection settings in a local data directory (by default ~/.local/share/proto-agent on Linux/macOS). You can view, export or delete that directory at any time; deleting it or uninstalling the Software removes the data. We never receive it.

3. Outbound Paths

The Software reports no usage data, has no telemetry and no crash reporting. Data leaves your machine only when:

  • Calling a model provider: when you trigger agent work, the prompt and context are sent to the model provider you configured yourself. That provider’s own privacy policy governs its handling; we are not a party to that relationship.
  • Checking for updates: see Section 4. This is the only path on which the Software talks to our servers by default, and it can be turned off in Settings.
  • Third-party integrations you enable: if you configure a bot or other integration, data is sent to that service under its own terms.

4. Update Checks and Update Events

Package upgrades are handled by the Software’s built-in updater, with automatic update checks enabled by default.

  • Endpoint: the updater first requests our update API at https://venyao.cn/api/update. If that endpoint is unavailable (connection failure, timeout, non-200 response, or a body that is not JSON), the updater silently falls back to reading the version manifest latest.yml published on object storage. The fallback never contacts our servers and carries no identifiers.
  • Fields sent:
    • current version (e.g. 0.1.85);
    • operating-system class (e.g. win);
    • event type: update check chk, download finished dl_done, install succeeded install_ok, failure fail;
    • failure reason (failure events only: interrupted download, hash mismatch, installer did not complete);
    • install_id: a locally generated random 16–32 character lowercase alphanumeric string, used only to fold the events of one installation into a single anonymous device; it contains no hardware or account information;
    • the HTTP User-Agent of the request (which includes your OS version and Software version, generated by your system).
  • Fields never sent: device fingerprints, hardware IDs (CPU/mainboard/disk serial numbers, etc.), MAC address, accounts, names, email addresses, file paths, conversations or any business data. Raw IP addresses are not recorded either — the server log for this endpoint has no IP field.
  • Purpose: solely to measure version distribution and upgrade success rates, so we can judge whether older versions still need support, diagnose upgrade failures, and improve the update flow. Not used for profiling, advertising or cross-site tracking; not shared with third parties; never sold.
  • Frequency: once about 30 seconds after startup, then every 6 hours (with jitter); download, install-success and failure events are reported once each when they occur.
  • How to turn it off: disabling “Check for updates automatically” in Settings stops all requests to this endpoint and all event reporting. You can still check manually, which sends one equivalent check request.

5. Website and Download Data

When you visit this website or click a download, our servers record ordinary access logs including IP address, User-Agent, time and request path. Download and update events are logged separately and contain only time, version, OS class, install_id and User-Agent — no IP address. We use this data only to:

  • secure the service, prevent abuse and diagnose faults;
  • produce aggregated statistics (download requests, deduplicated installation instances, version distribution and upgrade success rate) for operational analysis.

We do not use advertising cookies, do not perform cross-site tracking, do not use third-party analytics, and do not sell personal information (CCPA).

6. Retention

  • Update and download event logs: kept in plaintext online for 30 days; afterwards they are compressed, archived and their permissions tightened (readable only by the operations account) and are not deleted. The long-term archive is used only for security auditing and to rebuild statistics, never for other purposes.
  • Event detail database: retained for 365 days, then deleted by month.
  • Aggregated statistics: retained indefinitely. Aggregates contain no personally identifiable information, and install_id is a random value we do not link to IP addresses, accounts or any identity.
  • Ordinary website access logs (which include IP addresses): kept in plaintext online for 30 days; afterwards they are compressed, archived and their permissions tightened (readable only by the operations account) and are not deleted — the long-term archive is used only for security auditing and to rebuild statistics, never for other purposes.

7. International Transfers

This website may be delivered through a global CDN, and logs may be processed in countries other than yours (including where we or our providers operate). We apply reasonable technical and organizational measures to protect this data.

8. Your Rights

  • Website data: you have the right to access, correct or delete your personal data, or to object to / restrict our processing. Contact us at the address below (GDPR, CCPA and similar laws).
  • Local instance data: the data is on your machine; you can view, export or delete it directly without involving us.

9. Children

The Software and website are not directed to children under 16, and we do not knowingly collect their personal data.

10. Changes and Contact

Updates to this Policy will be published on this website with a revised “last updated” date. For questions or requests, contact: 988152321@qq.com.